Data protection audit for TYPO3 websites

Last modified:

Why a data protection audit makes sense

Every website operator has a responsibility under European law ("General Data Protection Regulation" or GDPR for short) to protect the privacy of its users and to ensure that personal data is not misused or used unlawfully.

In order to comply with data protection regulations, a website should include a privacy statement that discloses to users what personal data is collected, how it is used, who has access to it and how it is protected. Such a privacy statement must be easily accessible and should be written in clear and simple terms so that any user can understand it.

In addition, a website should ensure that users' data is stored and transmitted securely. This can be achieved by implementing encryption technologies such as SSL certificates and using secure data transfer protocols such as HTTPS.

To keep data protection on a TYPO3-based website as secure as possible, we as a professional TYPO3 agency offer so-called data protection audits.

What exactly does a data protection audit do?

A data protection audit checks all pages of your TYPO3 website for possible vulnerabilities.

These include:

  • is the website hosted by a trusted provider in Germany (or the EU)?
  • are the web server settings correct (e.g. correct http header)?
  • are non-required cookies used without consent?
  • are non-required external services used without consent?
  • are analysis programs used correctly (e.g. with IP anonymization)?
  • etc.

Example of a data protection audit of a TYPO3 website:

 

Costs for conducting data protection audits

The following is a non-binding list of the costs to be expected for conducting and discussing a data protection audit of a TYPO3 website.

 

Our service Costs*

One-time data protection audit of a TYPO3 website

  • Implementation of the audit
  • Generation of a report
  • Discussion of the report and recommendations for action

Effort: approx. 2 Hrs.
 

Non-profit organisations:
with SLA: 2 * 79,00 € = 158,00 €
without SLA: 2 * 89,00 € = 178,00 €
 

Company:
with SLA: 2 * 89,00 € = 178,00 €
without SLA: 2 * 99,00 € = 198,00 €

Data protection audits on a regular basis

  • Automatic execution of a quarterly audit
  • Generation of the audit
  • Automatic dispatch
  • Interval can be chosen individually (monthly, quarterly, etc.)
  • Effort per audit: 1 hr.

Effort: approx. 1 Hrs.
 

Non-profit organisations:
with SLA: 1 * 79,00 € = 79,00 €
without SLA: 1 * 89,00 € = 89,00 €
 

Company:
with SLA: 1 * 89,00 € = 89,00 €
without SLA: 1 * 99,00 € = 99,00 €

* all prices are exclusive of VAT.

One-time data protection audit of a TYPO3 website

Costs*

Effort: approx. 2 Hrs.
 

Non-profit organisations:
with SLA: 2 * 89,00 € = 178,00 €
without SLA: 2 * 89,00 € = 178,00 €
 

Company:
with SLA: 2 * 99,00 € = 198,00 €
without SLA: 2 * 99,00 € = 198,00 €

* all prices are exclusive of VAT.

  • Implementation of the audit
  • Generation of a report
  • Discussion of the report and recommendations for action
Data protection audits on a regular basis

Costs*

Effort: approx. 1 Hrs.
 

Non-profit organisations:
with SLA: 1 * 89,00 € = 89,00 €
without SLA: 1 * 89,00 € = 89,00 €
 

Company:
with SLA: 1 * 99,00 € = 99,00 €
without SLA: 1 * 99,00 € = 99,00 €

* all prices are exclusive of VAT.

  • Automatic execution of a quarterly audit
  • Generation of the audit
  • Automatic dispatch
  • Interval can be chosen individually (monthly, quarterly, etc.)
  • Effort per audit: 1 hr.